Job Details

Work Location: Harrisburg, PA
Work Arrangement: Hybrid
Interview Type: Onsite
Residency Requirements: Must be local to Harrisburg, PA
Visas Accepted: GC and USC only

Position Overview:
Our client is seeking an Information Security Analyst responsible for performing root cause analysis of security events and incidents, conducting risk assessments, and deploying security controls to protect sensitive data. This role supports enterprise security initiatives, system monitoring, audit compliance, and disaster recovery readiness.

Key Responsibilities:

Security Operations

• Perform root cause analysis of security events and incidents
• Conduct risk analysis to identify vulnerabilities that could lead to lost or stolen data
• Deploy and administer vendor and internally developed security tools and procedures
• Monitor system availability, performance, and capacity metrics
• Provide audit support and collect evidence for internal and external reviews
• Assist in maintaining and testing Disaster Recovery and Business Continuity Plans

• Provide accurate effort estimates and timely status updates
• Support implementation of security enhancements and improvements

• Perform analysis, documentation, and testing of system enhancements
• Conduct unit testing to ensure specifications are met and no adverse system impacts occur
• Maintain technical and functional application documentation

• Mentor junior staff on information security processes
• Ensure compliance with enterprise security and privacy policies
• Stay current on industry standards and best practices
• Support transformation initiatives aligned with strategic objectives

• Bachelor's degree or equivalent experience
• 2 to 5 years of experience in information security
• Ability to coordinate escalation teams to resolve security issues
• Strong analytical skills with the ability to assess complex information
• High level of integrity and professional ethics
• Strong written and verbal communication skills
• Proficiency in Microsoft Office Suite
• Strong time management and organizational skills

• Security principles and risk assessment standards
• Information security best practices and defense in depth strategies
• Network technologies and security controls
• Experience in several of the following areas:
  • Access control
  • Application development
  • Database security
  • Encryption
  • Network security
  • Security frameworks such as NIST
  • Server hardening
  • Server patching technologies

• Current security related industry certifications
• Experience with cloud computing and cloud native technologies
• Application development experience including scripting and automation
• Experience automating business processes